Filters for agents, hosts, anything in the message really that should let you get the desired behavior. Note that you can have several instances of the action for a given incident rule each with a different filter and recipient list.